Cross site scripting

Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...

CVE-2008-6645

Opencosmo VisualSentinel 0.7 contains an XSS vulnerability when processing the User-Agent header ($_SERVER['HTTP_USER_AGENT']), which is displayed in log files. This could allow injection of arbitrary script/HTML. The NVD reports CVSSv2 base score 4.3 (MEDIUM). No remediation details are provided...

CVE-2008-6645

Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...

CVE-2008-6645: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...

Talk about browser sniffing and feature detection-vulnerability warning-the black bar safety net

| Talk about browser sniffing and feature detection --- Browser sniffing The first tips is to analyze the User Agent to obtain, for example, jQuery1. 3. 1 of the core. js: // Use of jQuery. browser is deprecated. // It's included for backwards compatibility and plugins, // although they should wo...

PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit

No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...

PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution

PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL...

远古视频点播系统注入漏洞

漏洞产生于文件/webmedia/oemui/user/guest.asp，访问这个页面需要注册 相关代码： szAgent = Request.ServerVariables"HTTPUSERAGENT" aTmpInfo = SplitszAgent, " ", -1, 1 aAgentInfo = SplitaTmpInfo1, "; ", -1, 1 szBrowser = aAgentInfo1 if RightaAgentInfo2, 1 = "" or RightaAgentInfo2, 1 = ";" then szOS = LeftaAgentInfo2,...

Fedora Update for mutt FEDORA-2007-0001

Check for the Version of mutt OpenVAS Vulnerability Test Fedora Update for mutt FEDORA-2007-0001 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for mutt FEDORA-2007-540

Check for the Version of mutt OpenVAS Vulnerability Test Fedora Update for mutt FEDORA-2007-540 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Graugon Forum 1 - 'id' Command Injection / SQL Injection

!/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Firepack Code Execution

!/usr/bin/perl Firepack - Remote Command\Code Execution Exploit Firepack is a web atting toolkit often used in 2008, when the most versions of it were published. A short time ago i looked though the sourcecode and noticed that Vulnerability which can be used if the admin doesn't use a .htaccess...

simplePMS CMS 0.1.3a LFI / Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Script : simplePMS CMS v0.1.3a Download: http://garr.dl.sourceforge.net/sourceforge/simplepms/simplePMS-v0-1-3prealpha.tar.bz2 Remote Command Execution Exploit Also affected to multiple LFI vulnerabilities -- Needs Register Globals ON $filename no...

Stable and Beta Update: Incognito Mode Fix

Google Chrome's Beta and Stable channels have been updated to 1.0.154.48. The change in 1.0.154.46 to fix Hotmail caused a problem for users in Incognito mode trying to access sites which depend on the User-Agent header. This header identifies the type of browser making the request and should be...

MemHT Portal <= 4.0.1 (avatar) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl MemHT Portal = 4.0.1 avatar Remote Code Execution Exploit by yeat - stakerathotmaildotit use Getopt::Std; use Digest::MD5'md5hex'; use LWP::UserAgent; getopts'p:',\my %opts; my $host,$file,$id,$username,$password = @ARGV; my $http = new...

MemHT Portal 4.0.1 - Remote Code Execution

MemHT Portal 4.0.1 - Remote Code Execution !/usr/bin/perl MemHT Portal 7 Main::Usage; else HTTP::UserAgent$uagent; MemHT::Login; MemHT::Exploit$file; MemHT Exploit Package package MemHT; sub Exploit my $resp; my $file = shift...

Fhimage 1.2.1 - Remote Command Execution (mq = off)

!/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1 http://www.flash-here.com/downloads/download.php?id=9 Remote...

Joomla com_phocadocumentation (id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== Joomla comphocadocumentation id Remote SQL Injection Exploit =============================================================== !/usr/bin/perl -w Joomla comphocadocumentation Sql...

Ultimate PHP Board <= 2.2.1 (log inj) Privilege Escalation Exploit

Exploit for unknown platform in category web applications ================================================================== Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + l...

Flexphplink Pro Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ============================================= Flexphplink Pro Arbitrary File Upload Exploit ============================================= !/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro...